Social Media Metrics

Fetch follower counts and social media metrics from 11+ platforms using profile URLs or nicknames, including Bilibili, YouTube, TikTok, Instagram, and more.

This skill is coherent with its stated purpose and implements scraping for many platforms. Key things to consider before installing: - It needs Playwright and will launch a real Chrome process for some sites; follow SKILL.md to install browsers. - For Xiaohongshu (and some others) you'll be asked to log in by scanning a QR code; the script persists cookies to ~/.playwright_cdp_profile so future runs reuse the session. If you don't want persistent sessions, delete that folder between runs. - The skill opens a local DevTools/remote-debugging port (19222) to connect Playwright to Chrome — the port is bound to localhost but avoid running this on untrusted or public servers. - No hidden remote endpoints or secret-exfiltration code were found in the reviewed files, and no unexpected environment variables are required (YOUTUBE_API_KEY is optional and documented). Recommendations: run the skill on a personal or isolated machine (not a shared CI/hosted environment), inspect the code yourself if you need stronger assurance, and remove ~/.playwright_cdp_profile when finished if you want to clear persisted sessions. If you prefer less browser interaction, supply a YOUTUBE_API_KEY for YouTube or run the tool in an isolated VM/container.

Type: OpenClaw Skill Name: social-metrics Version: 1.0.2 The skill is a functional social media scraper, but it is classified as suspicious due to high-risk operational requirements and browser configurations. Specifically, SKILL.md instructs the AI agent to execute shell commands (pip install, playwright install), and scripts/utils/browser.py launches a Chrome instance with a remote debugging port (19222) and a persistent user profile directory (~/.playwright_cdp_profile). While these capabilities are plausibly necessary to bypass anti-bot measures and maintain login sessions for platforms like Xiaohongshu, they grant the agent broad system access and create a significant attack surface without explicit sandbox constraints.